Developing a security policy

When creating a security policy, we should keep in mind that it should be simple and easy for all users. The objective of the policy should be to protect data while keeping the privacy of users intact.

It should be developed around these points:

When developing a security policy, a user should use only those services for which permission has been granted. Anything that is not permitted should be restricted in the policy.